Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2003-0343

Disclosure Date: May 21, 2003 (last updated February 22, 2025)
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks.
0
0
Attacker Value
Unknown

CVE-2003-0342

Disclosure Date: May 20, 2003 (last updated February 22, 2025)
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges.
0
0
Attacker Value
Unknown

CVE-2002-0126

Disclosure Date: March 25, 2002 (last updated February 22, 2025)
Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.
0
0